Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

Warning: Calendly Phishing Pages Are Targeting Job Seekers

Oct 22, 2026 By KnowBe4 Team In KnowBe4
Researchers at Malwarebytes warn that a phishing campaign is using spoofed Calendly pages to trick users into handing over their Facebook and Google account credentials. The phishing sites pose as Calendly booking pages for job interviews at Meta, asking users to enter their information to sign up for a phone call with a recruiter. After this, the user is taken to a spoofed Facebook or Google login page designed to steal their credentials and intercept their multifactor authentication codes.
Read Post
What Business Email Compromise Really Costs You

What Business Email Compromise Really Costs You

Oct 22, 2026 By SecuritySenses In SecuritySenses
Business email compromise can turn one convincing message into a six-figure loss, days of disruption and a difficult recovery effort. Criminals study how an organization communicates, then impersonate executives or trusted suppliers to redirect legitimate payments. The direct financial loss may be only the beginning. Legal advice, incident response, delayed projects and damaged supplier relationships all raise the final bill. Effective protection therefore depends on coordinated email security, payment controls and verification procedures.
Read Post
knowbe4

Warning: Phishing Attacks Are Abusing RMM Tools to Target Bank Accounts

Oct 21, 2026 By KnowBe4 Team In KnowBe4
Researchers at Fortra are tracking a surge in phishing attacks targeting bank accounts via remote monitoring and management (RMM) tools. “Hybrid phishing-to-RMM campaigns have emerged as a potent method to target North American financial institutions, with a focused interest in business commercial banking accounts,” Fortra says.
Read Post
knowbe4

Phishing Is Now A Criminal Impersonation Industry. Here Is How To Fight Back

Oct 17, 2026 By Stu Sjouwerman In KnowBe4
For years, we described phishing as an email problem: an attacker writes a convincing message, sends it to thousands of people and waits for someone to click. That model is now outdated. Microsoft’s disruption of YAM Store, CoGUI and Iron Man exposed something much larger: a cloud-based impersonation industry.
Read Post
knowbe4

Phishing Attacks Target YouTubers With Phony Sponsorships

Oct 16, 2026 By KnowBe4 Team In KnowBe4
A phishing campaign is targeting YouTubers with phony sponsorship offers, according to researchers at ESET. The emails are personalized to each target, making specific references to their channels, and are designed to trick users into granting access to their Google accounts. “One such recent campaign impersonates Hollyland, a legitimate manufacturer of wireless transmission and audiovisual equipment,” ESET says.
Read Post
Email Security Best Practices for Marketing Teams

Email Security Best Practices for Marketing Teams

Oct 16, 2026 By SecuritySenses In SecuritySenses
A marketing campaign can reach thousands of subscribers in minutes. That reach makes email valuable, but it also makes marketing infrastructure an attractive target. Attackers may impersonate a trusted brand, steal access to campaign tools, or exploit an overlooked integration to send deceptive messages.
Read Post
knowbe4

Warning: Phishing Attacks Are Using AI-Themed Ad Lures

Oct 14, 2026 By KnowBe4 Team In KnowBe4
A phishing campaign is using AI-themed lures to target employees who operate advertising accounts, according to a new report from Island. The campaign is launched from a phishing platform that poses as a portfolio of AI advertising tools, using branding from Gemini, Claude, ChatGPT, Perplexity, and Muse. The platform’s operator added a fake Muse Ads lure eight days after Meta launched its Muse AI agent.
Read Post

Emails as Events: First Look at LimaCharlie Email Security

Oct 14, 2026 By LimaCharlie In LimaCharlie
LimaCharlie CEO and founder Maxime Lamothe-Brassard gives the first public demo of LimaCharlie Email Security, which treats every message as an event in the same platform as your endpoint, cloud, and identity telemetry. Email Security connects to Microsoft 365 and Google Workspace through the provider API, with no MX record changes. Every verdict shows the signals and scoring behind it, every action is audited, and everything you see in the UI is available through the API, CLI, and MCP server so AI agents can work with it directly.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.